// packs / entra-hardening
Entra ID / Identity Hardening Pack
GlobalIdentity Pack | Global
Deep-dive into your identity attack surface — the #1 breach vector. Six dimensions covering every aspect of your Entra ID configuration, from MFA coverage to app registration hygiene.
Single report, no commitment.
Continuous monitoring — fresh report every 30 days.
Available in AUD, USD, GBP, EUR, SGD. MSP partners get volume discounts via the partner programme.
What it scores
MFA coverage
per-user status, phishing-resistant enforcement, auth methods
Conditional Access gap analysis across users, apps, and platforms
Privileged role hygiene
GA count, PIM adoption, standing vs eligible
App registration audit
expired secrets, excessive permissions, unused apps
Guest access exposure
stale guests, invite settings, B2B policy
Risk policy effectiveness
Identity Protection, Secure Score, alert review
Microsoft APIs
- Microsoft Graph (universal scopes, read-only across the tenant)
- Azure REST (when the product reads Azure subscription posture)
- Defender + Intune APIs where applicable
Customer prerequisites
- Microsoft 365 tenant with admin-consent capability
- Global Reader or equivalent for the consenting admin
- No agent installs, no infrastructure changes required
- Report delivered by email within 10 minutes of consent
Other Packs
Full email attack surface analysis — spoofing, phishing, data leakage, and mail flow hygiene across your Microsoft 365 t…
Find where your sensitive data is exposed right now — misconfigured sharing, labelling gaps, guest sprawl, and excessive…
Fraud controls, privileged access, data integrity, and regulatory evidence readiness for financial services organisation…